Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed5ae38-6026-3863-acc1-7b0d45a1e7c2.roa
File:                     8ed5ae38-6026-3863-acc1-7b0d45a1e7c2.roa (raw, json)
Hash identifier:          ucTE9PnOdsl8hrP6IifemJTddA7BDcOwf4s5IbrGpV0=
Subject key identifier:   D0:EA:26:6C:AC:88:ED:71:5C:7F:41:A0:A5:36:A9:91:95:37:53:2F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E059C6DA6D307623724B11780
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed5ae38-6026-3863-acc1-7b0d45a1e7c2.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     30036
IP address blocks:        173.26.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:6d:a6:d3:07:62:37:24:b1:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=74826fa3-387c-4a4e-b2f7-9019d07e56d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:33:37:b5:0f:5a:dc:cc:b3:ff:b3:da:b3:46:
                    5a:01:1b:de:d6:a1:2f:e4:8d:dd:42:6b:69:3d:c4:
                    62:58:b2:29:af:e1:b9:1d:c4:dd:0c:b0:73:55:9f:
                    76:fc:98:20:7f:fd:4e:d9:a0:ee:ba:b0:28:49:a7:
                    9d:82:7f:be:69:b3:f9:52:b1:a9:8f:01:23:17:51:
                    23:32:6d:77:5b:cc:08:a7:47:20:1f:72:d6:96:ba:
                    57:ff:bd:63:9d:4d:2f:d2:21:96:31:54:d6:f4:87:
                    31:50:e1:d8:ed:a5:47:45:56:be:16:74:19:4b:0f:
                    e3:f9:2c:f4:dc:a3:94:13:48:45:da:93:b6:83:dc:
                    03:d2:25:56:e6:b4:db:91:63:1d:ae:65:66:3c:66:
                    63:b0:24:b3:2f:09:10:36:ec:3f:19:81:30:90:b2:
                    6c:db:ec:e0:f5:13:a0:30:50:f2:d3:e1:19:cd:6d:
                    f9:7a:b6:65:24:0b:19:7b:be:fe:9f:41:eb:5d:76:
                    da:d9:85:7d:32:19:4f:0a:0e:dd:bd:62:33:0e:52:
                    db:b8:ab:85:dc:27:e0:07:51:db:81:41:6a:bc:ad:
                    dd:ff:6e:96:55:e1:96:74:de:db:22:ec:f6:70:85:
                    8f:d1:5b:a1:fa:77:ec:6e:db:a9:0f:de:6d:f9:dd:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EA:26:6C:AC:88:ED:71:5C:7F:41:A0:A5:36:A9:91:95:37:53:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8ed5ae38-6026-3863-acc1-7b0d45a1e7c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.26.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:29:2d:2a:fa:5f:10:90:af:3f:c1:06:6c:f0:8f:97:6b:58:
         80:e3:f3:0d:04:be:0c:36:63:39:61:a3:d0:d0:a5:33:8f:d0:
         72:2c:4a:33:f5:14:44:c2:19:aa:8a:65:39:e4:e1:55:f8:20:
         8f:b4:fb:15:95:a8:85:1a:5a:17:a7:e4:cc:90:43:c2:43:7e:
         23:d6:a0:cb:46:b4:96:e2:96:4f:36:a1:6e:4c:17:e1:7e:0c:
         2e:e9:48:64:35:e5:89:95:99:1f:6d:11:ca:d2:90:cf:cd:cb:
         3b:fc:db:9d:cf:fa:b9:8c:76:51:3a:1e:07:f2:fe:20:b4:ca:
         f2:bc:10:3d:d2:b0:a8:0e:bf:75:75:54:86:ff:ca:11:44:eb:
         85:63:32:39:54:af:f2:fa:fb:1b:d5:12:dd:82:b3:04:28:76:
         ce:fb:f0:64:73:a7:ac:e0:fa:de:8a:3a:82:23:0f:a4:e5:c9:
         a7:dc:22:67:ee:f5:e5:2d:19:26:d6:7b:d2:de:26:f2:8b:ad:
         24:3c:83:82:0b:c3:a7:0a:94:e1:ac:b5:ff:4e:96:5b:8e:1f:
         d8:53:8e:37:13:8e:8b:b3:ba:50:25:58:1a:40:78:ab:bd:06:
         91:69:a6:52:d5:5a:3c:05:05:c8:bb:92:a1:70:18:cd:02:60:
         1c:23:07:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:27:18 2026 by rpki-client